CVE-2011-4042

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-04-03 · updated 2026-07-09

Description

An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code by using a crafted HTML document to obtain control of a function pointer.

Affected products

arcinfo Frontvue: all versions
arcinfo PcVue: from 6.0 through 10.0
arcinfo Plantvue: all versions

References

http://www.pcvuesolutions.com/index.php?option=com_content&view=article&id=244&Itemid=257
http://www.us-cert.gov/control_systems/pdf/ICSA-11-340-01.pdf
https://support.pcvuescada.com/index.php?option=com_k2&view=item&id=512&Itemid=440
http://www.pcvuesolutions.com/index.php?option=com_content&view=article&id=244&Itemid=257
http://www.us-cert.gov/control_systems/pdf/ICSA-11-340-01.pdf
https://support.pcvuescada.com/index.php?option=com_k2&view=item&id=512&Itemid=440

Get alerted when CVE-2011-4042 or the next vulnerability affects your stack